PT-2015-4827 · Cisco · Cisco Firesight System

Publicado 2015-04-23 · Atualizado 2015-04-23 · CVE-2015-0706

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.1 through 5.3.1.2 Cisco FireSIGHT System Software version 6.0.0

Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header.

Recommendations For Cisco FireSIGHT System Software versions 5.3.1.1 and 5.3.1.2, update to a version that includes the fix for this issue. For Cisco FireSIGHT System Software version 6.0.0, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the HTTP header to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2015-0706

Produtos afetados

Cisco Firesight System

Referências · 2

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38486 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0706 · Nota de Segurança